In a recent security breach, an attacker sent out nearly 24,000 phishing emails using data extracted from a compromised third-party email platform associated with CoinGecko. The attacker infiltrated a GetResponse employee's account, gaining access to nearly 2 million contacts from CoinGecko’s GetResponse account. This critical information was disclosed by CoinGecko in an official statement.

Following the breach, the malicious actor utilized another GetResponse client's account to dispatch 23,723 phishing emails. Importantly, no phishing emails originated directly from CoinGecko's domain, ensuring that CoinGecko's user accounts and passwords remained secure. However, the data leak included users' names, email addresses, IP addresses, and the locations where emails were opened.

CoinGecko is taking active measures to address this security incident in collaboration with GetResponse. "We are actively investigating this situation with GetResponse and informing all affected users," stated CoinGecko. "Additionally, we are thoroughly reviewing our security procedures and will look to enhance our security protocols in collaboration with our vendors."

In light of this incident, CoinGecko urges its users to be vigilant about emails that claim to offer airdrops. Users are advised to avoid clicking on links or downloading attachments from unsolicited emails and to adhere to best security practices.

This breach follows an earlier incident this year where a hacker compromised CoinGecko's X (formerly Twitter) account, promoting a suspicious airdrop for the cryptocurrency GCKO, as reported by The Block.

The Block has reached out to CoinGecko for additional comments regarding the June 5 data breach. As investigations continue, CoinGecko remains committed to strengthening its security measures to prevent future breaches.